You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
It's really easy to do XSS or any HTML for that matter thanks to the Markdown parser for the bio. Unless the parser you're using can sanitize inputs for us, we should probably disable the HTML in Markdown.
For the record, I didn't think it would work, and by the time it did, I couldn't go back and change it since the Heroku app crashed. No malicious intentions :)
It's really easy to do XSS or any HTML for that matter thanks to the Markdown parser for the bio. Unless the parser you're using can sanitize inputs for us, we should probably disable the HTML in Markdown.
It can also be seen at http://hshackers.org/members
The text was updated successfully, but these errors were encountered: